aboutsummaryrefslogtreecommitdiff
path: root/package/mpg123
Commit message (Collapse)AuthorAgeFilesLines
* package/mpg123: bump version to 1.25.13Gravatar Bernd Kuhls2019-11-042-5/+5
| | | | | | | Release notes: http://www.mpg123.org/cgi-bin/news.cgi#2019-10-26 Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
* package/mpg123: security bump to version 1.25.12Gravatar Peter Korsgaard2019-08-272-5/+5
| | | | | | | | | | | | | | | | >From the release notes: - Fix an out-of-bounds read of maximal two bytes for truncated RVA2 frames (oss-fuzz-bug 15975). The earlier fix around the same location needed one thought more. Actually, another though was needed, oss-fuzz-bug 16009 documents the incomplete fix. - Fix an invalid write of one zero byte for empty ID3v2 frames that demand de-unsyncing (oss-fuzz-bug 16050). - Fix dynamic build with gcc -fsanitize=address (check for all dl functions before deciding that separate -ldl is not needed). Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/mpg123: fix hashGravatar Pierre-Jean Texier2019-08-111-1/+1
| | | | | | | | | | When bumping to version 1.25.11, an incorrect hash was set. Fixes: - http://autobuild.buildroot.net/results/454/454bc42053deb84a73ed75dda99ae9015d23da84/ Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
* package/mpg123: security bump to version 1.25.11Gravatar Jörg Krause2019-08-112-5/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | >From https://www.mpg123.de/cgi-bin/news.cgi: Fixes a number of bugs found by OSS-Fuzz: * Fix out-of-bounds reads in ID3 parser for unsynced frames. (oss-fuzz-bug 15852) * Fix out-of-bounds read for RVA2 frames with non-delimited identifier. (oss-fuzz-bug 15852) * Fix implementation-defined parsing of RVA2 values. (oss-fuzz-bug 15862) * Fix undefined parsing of APE header for skipping. Also prevent endless loop on premature end of supposed APE header. (oss-fuzz-bug 15864) * Fix some syntax to make pedantic compiler happy. The serious bugs trigger Denial of Service either via the nasty endless loop in supposed APE tags or by crashes if the invalid reads hit a diagnostic by the OS or, more likely, a security mechanism like the sanitizer instrumentation that enabled finding the bugs. I do not have CVE numbers for these bugs. I rather fix the bugs than name them. Just update, will you? Signed-off-by: Jörg Krause <joerg.krause@embedded.rocks> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
* package/mpg123: security bump to version 1.25.10Gravatar Bernd Kuhls2018-06-102-4/+6
| | | | | | | | | | Version 1.25.4 fixes CVE-2017-9545, for details see release notes: http://www.mpg123.org/cgi-bin/news.cgi Added upstream hashes. Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
* package/*/Config.in: fix help text check-package warningsGravatar Thomas Petazzoni2017-12-181-2/+2
| | | | | | | | | | | | | This commit fixes the warnings reported by check-package on the help text of all package Config.in files, related to the formatting of the help text: should start with a tab, then 2 spaces, then at most 62 characters. The vast majority of warnings fixed were caused by too long lines. A few warnings were related to spaces being used instead of a tab to indent the help text. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* mpg123: security bump to version 1.25.2Gravatar Peter Korsgaard2017-07-112-2/+5
| | | | | | | | | | | | | | | | | | >From the release notes: - Extend pow tables for layer III to properly handle files with i-stereo and 5-bit scalefactors. Never observed them for real, just as fuzzed input to trigger the read overflow. Note: This one goes on record as CVE-2017-11126, calling remote denial of service. While the accesses are out of bounds for the pow tables, they still are safely within libmpg123's memory (other static tables). Just wrong values are used for computation, no actual crash unless you use something like GCC's AddressSanitizer, nor any information disclosure. - Avoid left-shifts of negative integers in layer I decoding. While we're at it, add a hash for the license file. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* mpg123: security bump to version 1.25.1Gravatar Peter Korsgaard2017-07-032-6/+7
| | | | | | | | | | | | | | | | | | | | | | | | | >From the release notes: - Avoid memset(NULL, 0, 0) to calm down the paranoid. - Fix bug 252, invalid read of size 1 in ID3v2 parser due to forgotten offset from the frame flag bytes (unnoticed in practice for a long time). Fuzzers are in the house again. This one got CVE-2017-10683. https://sourceforge.net/p/mpg123/bugs/252/ - Avoid a mostly harmless conditional jump depending on uninitialised fr->lay in compute_bpf() (mpg123_position()) when track is not ready yet. - Fix undefined shifts on signed long mask in layer3.c (worked in practice, never right in theory). Code might be a bit faster now, even. Thanks to Agostino Sarubbo for reporting. dlopen() is now directly used to load output modules (and the --with-modules-suffix option has been removed), so adjust the modules logic to match. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* boot, package: use SPDX short identifier for LGPLv2.1/LGPLv2.1+Gravatar Rahul Bedarkar2017-04-011-1/+1
| | | | | | | | | | | We want to use SPDX identifier for license string as much as possible. SPDX short identifier for LGPLv2.1/LGPLv2.1+ is LGPL-2.1/LGPL-2.1+. This change is done using following command. find . -name "*.mk" | xargs sed -ri '/LICENSE( )?[\+:]?=/s/LGPLv2.1(\+)?/LGPL-2.1\1/g' Signed-off-by: Rahul Bedarkar <rahulbedarkar89@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* mpg123: security bump to version 1.23.8Gravatar Gustavo Zacarias2016-09-272-2/+2
| | | | | | | | | Fixes an out-of-bounds memory read in the ID3v2 parser for tags that claim an unrealistically small length. This crashes mpg123 or any application using libmpg123 with activated ID3v2 parsing. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* mpg123: bump to version 1.23.7Gravatar Gustavo Zacarias2016-09-252-2/+2
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* mpg123: bump to version 1.23.6Gravatar Gustavo Zacarias2016-07-012-2/+2
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* mpg123: bump to version 1.23.5Gravatar Gustavo Zacarias2016-06-263-50/+2
| | | | | | | Drop upstreamed patch and related autoreconf. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* Merge branch 'next'Gravatar Peter Korsgaard2016-06-012-2/+2
|\ | | | | | | Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * mpg123: bump to version 1.23.4Gravatar Gustavo Zacarias2016-05-152-2/+2
| | | | | | | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* | mpg123: unbreak static linking with alsa/portaudioGravatar Peter Korsgaard2016-05-252-0/+48
|/ | | | | | | | | | | | | | | | | Fixes: http://autobuild.buildroot.org/results/b2b/b2bc143fbd0b34e75a44af41ab6899dd9fa3c21a/ http://autobuild.buildroot.org/results/60d/60d56b0a75d209f2cfeff0727c2f900abc89d263/ http://autobuild.buildroot.org/results/6a8/6a8729ce69055821fdf0b91adcea2ea201d40189/ And many more. A recent upstream build system change caused LIBS to be ignored at build time (but still used a configure time), causing our static linking workarounds to no longer work. Fix it by adding a patch to cause it to no longer ignore LIBS. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* mpg123: bump to version 1.23.3Gravatar Gustavo Zacarias2016-03-252-4/+3
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/mpg123: fix static linking issue with alsaGravatar Bernd Kuhls2015-11-081-0/+3
| | | | | | | | | | | | | | | | | | As opposed to the other audio backends, the configure script does NOT use pkg-config to figure out how to link with alsa, breaking static linking as alsa uses pthreads. This patch uses the same fix from Peter used for portaudio: http://git.buildroot.net/buildroot/commit/package/mpg123/mpg123.mk?id=dea306c78b5d4c571555c50512e212a725b594b9 Fixes http://autobuild.buildroot.net/results/796/79613fda3f51e969ecd46ae1151bd4c3316639c3/ http://autobuild.buildroot.net/results/b0a/b0a99ff1516602ed42c0cc14d9d2922a01cdf88f/ http://autobuild.buildroot.net/results/5bd/5bdfd2aa9de568d0f7be27ffb18d4541b0e1be0c/ and many others Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* mpg123: bump to version 1.22.4Gravatar Gustavo Zacarias2015-10-022-4/+4
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* mpg123: replace $(shell ...) call with $(subst ...)Gravatar Arnout Vandecappelle2015-07-151-1/+1
| | | | | | | There's no reason to use a shell here. Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* packages: use backtick instead of $(shell ...) make functionGravatar Arnout Vandecappelle2015-07-151-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It is often difficult to know exactly when make will expand the variable, and usually it can only be expanded after the dependencies have been built (e.g. pkg-config or the .pc file). Using a backtick instead makes it very clear that it will be expanded only while executing the command. This change is useful for two cases: 1. The per-package staging (and host) directory will be created as part of the configure step, so any $(shell ...) variable that is used in the configure step will fail because the directory doesn't exist yet. 2. 'make printvars' evaluates the variables it prints. It will therefore trigger a lot of errors from missing .pc files and others. The backticks, on the other hand, are not expanded, so with this change the output of 'make printvars' becomes clean again. This commit contains only the easy changes: replace $(shell ...) with `...`, and also replace ' with " where needed. Follow-up commits will tackle the more complicated cases that need additional explanation. After this change, the following instances of $(shell ...) will remain: - All assignments that use := - All variables that are used in make conditionals (which don't expand the backticks). - All variables that only refer to system executables and make variables that don't change. - The calls to check-host-* in dependencies.mk, because it is eval'ed. [Original patch by Fabio Porcedda, but extended quite a bit by Arnout.] Signed-off-by: Fabio Porcedda <fabio.porcedda@gmail.com> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* mpg123: bump to version 1.22.2Gravatar Gustavo Zacarias2015-06-022-4/+4
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* portaudio: fix static linking issue with portaudioGravatar Peter Korsgaard2015-05-221-0/+3
| | | | | | | | | | | Fixes: http://autobuild.buildroot.net/results/25f/25f8088ecb276ff4559a56fcc4f1b92d11f7deac/ As opposed to the other audio backends, the configure script does NOT use pkg-config to figure out how to link with portaudio, breaking static linking as portaudio uses pthreads. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package: kill pointless text justificationGravatar Gustavo Zacarias2015-04-231-1/+1
| | | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Acked-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* mpg123: bump to version 1.22.1Gravatar Gustavo Zacarias2015-04-022-4/+4
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* mpg123: bump to version 1.22.0Gravatar Gustavo Zacarias2015-02-252-4/+4
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* mpg123: needs host-pkgconfGravatar Peter Korsgaard2014-11-281-0/+1
| | | | | | | | SDL detection is done using pkg-config. Fixes http://autobuild.buildroot.net/results/437/437f408122d7f21420a7cdc9758caf0ab1ba877d/ Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* mpg132: bump to version 1.21.0Gravatar Gustavo Zacarias2014-10-122-1/+4
| | | | | | | Also add hash file. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* packages: rename FOO_CONF_OPT into FOO_CONF_OPTSGravatar Thomas De Schampheleire2014-10-041-7/+7
| | | | | | | | | | | | To be consistent with the recent change of FOO_MAKE_OPT into FOO_MAKE_OPTS, make the same change for FOO_CONF_OPT. Sed command used: find * -type f | xargs sed -i 's#_CONF_OPT\>#&S#g' Signed-off-by: Thomas De Schampheleire <thomas.de.schampheleire@gmail.com> Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* mpg123: bump to version 1.20.1Gravatar Gustavo Zacarias2014-06-181-1/+1
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* mpg123: correct powerpc cpu variant selectionGravatar Peter Korsgaard2014-06-021-0/+2
| | | | | | | | | | | Fixes http://autobuild.buildroot.net/results/d8a/d8af8f991b4429cf06081ddf2f08043861842a50/ ppc_nofpu should (as the name indicates) only be used for powerpc. It is not clear to me if this code works for powerpc64(le) as well, so this is only selected for classic ppc32. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* mpg123: bump to 1.20.0, providing better optimizations for ARM and AArch64Gravatar Thomas Petazzoni2014-06-011-1/+9
| | | | | | | | | | | | | | As suggested by Gustavo, this patch bumps mpg123 to 1.20.0, and therefore superseds the patch initially provided by Sven Neumann. In 1.20.0, there is a new CPU type arm_fpu, which will compile code for both VFP and NEON, and choose at runtime which one to use. Similarly for AArch64, the option --with-cpu=aarch64 will compile both the NEON and generic decoders, and select at runtime which one to use. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* powerpc: add BR2_POWERPC_CPU_HAS_ALTIVEC to replace adhoc deps/checksGravatar Cody P Schafer2014-05-261-3/+1
| | | | | Signed-off-by: Cody P Schafer <cody@linux.vnet.ibm.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* mpg123: needs MMUGravatar Ryan Barnett2014-02-221-0/+1
| | | | | | | | | | | | | | | | mpg123 needs MMU because the application that is built with this package uses fork. Currently it is difficult to only build the libraries for mpg123 so disabling the package all together when there is no MMU support. Note: mpg123 is an optional dependency of mpd but mpd already requires BR2_USE_MMU so there is no need to add this as a dependency. Fixes: http://autobuild.buildroot.net/results/5b0/5b053af566dd122ae7e58893e77d5d5f3070fb9e Signed-off-by: Ryan Barnett <rjbarnet@rockwellcollins.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* mpg132: bump to version 1.18.0Gravatar Gustavo Zacarias2014-02-041-1/+1
| | | | | | | | Fixes a couple of buffer overflows so it should be considered as a security bump (no CVEs though). Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* mpg123: bump to version 1.17.0Gravatar Gustavo Zacarias2014-01-131-1/+1
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* mpg123: do not disable optimizationsGravatar Sven Neumann2013-11-221-1/+1
| | | | | | | | | It seems pointless to disable even the default optimizations. If at all this should be made dependant on the values of the BR2_OPTIMIZE variables. Signed-off-by: Sven Neumann <neumann@teufel.de> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* mpg123: bump to version 1.16.0Gravatar Axel Lin2013-10-071-1/+1
| | | | | Signed-off-by: Axel Lin <axel.lin@ingics.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* Remove multimedia subdirectoryGravatar Jérôme Pouiller2013-09-082-0/+75
| | | | | | | | | | | Unless it was a group of sub-packages, packages was never regrouped by category. multimedia/ was an exception to this rule. This patch move packages/multimedia/ sub-directories to packages/. It keeps two subdirectories for gstream 0.10 and gstreamer 1.X. Signed-off-by: Jérôme Pouiller <jezz@sysmic.org> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* audio: Move all audio packages into audio subdirGravatar Daniel Laird2008-09-053-129/+0
| | | | | | | | Moved all audio packages into a subdir called audio. I then created a Config.in and made sure that a audio.mk existed. Daniel Laird
* Kconfig: remove 'default n'Gravatar Peter Korsgaard2008-07-171-1/+0
| | | | 'default n' is the default, so there's no need to say it explicitly.
* - just use the strip binary to avoid confusing libtool (quotes)Gravatar Bernhard Reutner-Fischer2007-10-011-1/+1
| | | | - use $(STRIPCMD) in packages to avoid clashes with $(STRIP)
* Use correct location of mpg123 binaryGravatar Ulf Samuelsson2007-09-231-3/+3
|
* Remove renamed mpg123 patchGravatar Ulf Samuelsson2007-08-281-44/+0
|
* Remove mpg123 patch from current build, full removal pendingGravatar Ulf Samuelsson2007-08-282-1/+45
|
* - sed -i -e "/;$/s/;$//g" $(egrep ";$" package/* package/*/*.mk toolchain/* ↵Gravatar Bernhard Reutner-Fischer2007-08-211-1/+1
| | | | toolchain/*/*.mk */Makefile.in -l)
* Remove switches if sstrip is runGravatar Ulf Samuelsson2007-08-211-1/+1
|
* SED away some whitespaceGravatar Ulf Samuelsson2007-08-201-2/+2
|
* Revert bad patch of mpg123Gravatar Ulf Samuelsson2007-08-011-3/+1
|
* Use TARGET_CONFIGURE_ARGS in some packages lackingGravatar Ulf Samuelsson2007-07-301-0/+1
|